CVE-2022-2588: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 5.9% chance of exploitation in the next 30 days.

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 20.04 only; version 22.04 only
• Linux Linux Kernel: before 4.9.326 (fixed in 4.9.326); from 4.10, before 4.14.291 (fixed in 4.14.291); from 4.15, before 4.19.256 (fixed in 4.19.256); from 4.20, before 5.4.211 (fixed in 5.4.211); from 5.5, before 5.10.137 (fixed in 5.10.137); from 5.11, before 5.15.61 (fixed in 5.15.61); …

Published 2024-01-08. Last modified 2026-06-17.